This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          FP4MeoFzEZr7YplsQ7eMm8l30NX2p+1K8xojZxnDeNU=
Subject key identifier:   71:72:51:D6:26:6D:BB:D3:E2:FC:9E:FD:7F:B9:E7:7B:CF:3D:BF:C6
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019B228753A200E4DD29FFB4DF6F856350F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          12EF
Signing time:             Mon 15 Dec 2025 15:00:52 +0000
Manifest this update:     Mon 15 Dec 2025 15:00:52 +0000
Manifest next update:     Tue 16 Dec 2025 15:00:52 +0000
Files and hashes:         1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
                          2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
                          3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
                          4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
                          5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
                          6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
                          7: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
                          8: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
                          9: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (hash: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=)
                          10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
                          11: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
                          12: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
                          13: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
                          14: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
                          15: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
                          16: lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa (hash: FYaKqxecYgMTbSZpwvOmlyri4oxlPadKxms2T+56wVY=)
                          17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
                          18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: MW8o0sfYDbNQHHfcwofvQix3ZqsoN6T67ZgAPg8xNGU=)
                          20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:87:53:a2:00:e4:dd:29:ff:b4:df:6f:85:63:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Dec 15 15:00:52 2025 GMT
            Not After : Dec 16 15:00:52 2025 GMT
        Subject: CN=717251d6266dbbd3e2fc9efd7fb9e77bcf3dbfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:20:31:80:2a:74:f8:d6:16:c0:ca:23:c0:
                    a2:9b:3e:28:e0:f5:fe:08:f9:c9:b0:36:a3:33:0e:
                    ac:db:81:41:9c:e9:ac:33:34:a3:89:60:81:50:68:
                    da:8d:64:42:5c:a6:9b:a8:40:86:83:04:54:e9:ef:
                    56:68:28:b9:4f:cf:e5:0c:0f:a9:54:c8:3d:e2:c3:
                    8e:ba:ee:cd:04:d8:ec:b7:03:7a:55:54:c5:01:6b:
                    a9:5b:2e:91:3f:1b:e0:4d:18:51:ee:36:66:41:68:
                    74:ef:a4:60:ca:25:21:ef:ff:63:6e:bd:8c:0e:fb:
                    d5:18:06:50:83:5d:cd:a9:7b:f2:66:16:6f:23:52:
                    f3:f9:6d:ec:1b:ed:d0:4f:3d:29:98:17:a8:d1:cd:
                    32:8c:6d:7e:2a:bd:84:10:d5:d7:e4:c2:d5:a6:e5:
                    8f:0b:94:59:dd:df:6c:e7:90:0c:24:fe:65:ed:1f:
                    6c:b7:ac:00:3b:35:27:36:bf:03:89:c8:ca:fc:58:
                    e6:40:76:07:9b:a1:68:5e:d5:72:bb:e4:cc:5f:9b:
                    89:c3:87:c5:0a:af:c2:32:0f:bc:f7:ab:50:2e:71:
                    c9:86:f1:4e:ca:81:65:ff:cc:ab:22:9d:9e:6f:82:
                    6a:b4:67:a6:a6:52:bc:23:9b:8d:cf:11:d3:ae:23:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:51:D6:26:6D:BB:D3:E2:FC:9E:FD:7F:B9:E7:7B:CF:3D:BF:C6
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:8b:4b:aa:44:15:08:61:5f:cb:8a:a3:eb:ec:39:1a:99:
         b4:21:44:27:c3:36:02:e2:73:71:e4:f9:a3:38:e1:f7:44:9c:
         83:d5:96:b0:ba:e3:04:ed:a9:a9:93:e1:fd:f9:ac:51:e2:d2:
         da:db:07:60:5e:22:ec:57:fb:23:6f:f9:a7:f1:2d:15:86:90:
         a0:c0:64:92:73:62:8b:f0:f0:ee:c4:a8:97:c9:c0:00:f6:e7:
         12:47:07:d9:61:0e:e5:98:0d:0f:4f:1e:96:70:dd:be:fd:4c:
         c0:77:37:41:80:e0:81:80:08:af:3e:c7:96:94:96:4e:ac:4c:
         d8:e7:42:0a:e6:02:10:5e:e8:59:f9:20:ea:a5:b9:6c:3f:59:
         23:71:ff:1a:a6:6c:82:a5:fa:f9:34:2c:19:40:42:2b:33:85:
         ee:bb:db:95:41:66:40:33:04:d0:00:31:27:3f:e9:d6:84:64:
         2b:60:5c:3c:94:d0:75:87:87:0d:ac:2e:06:58:52:42:6b:27:
         c3:05:6d:9d:e9:14:d1:37:78:e1:22:9a:42:e1:36:21:23:c5:
         bf:a8:6c:62:25:43:9b:61:ae:a5:91:1a:0c:97:60:90:b0:23:
         9e:54:67:c4:cb:97:dc:73:14:34:17:75:9a:9e:d6:45:5b:83:
         1d:b3:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:19:23 2025 by rpki-client